Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          F9iqEKlb06qYL44ZgZgpTW2MARujPkZkhDnFqNRpxXQ=
Subject key identifier:   F7:63:30:B0:5A:C0:76:43:F3:B6:75:AC:EE:DB:AF:F6:85:6F:91:B0
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       4CDA6F1B03B70C4F858F806CD28EB0A5E4A1A0E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          0439
Signing time:             Mon 20 Oct 2025 18:07:24 +0000
Manifest this update:     Mon 20 Oct 2025 18:07:24 +0000
Manifest next update:     Fri 24 Oct 2025 18:07:24 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: op2SzqLc46naTqu8XcKLDEAdNvvH35hKx32Dg/skh/A=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: 1S3KJ3fnyzQhl2CB002Ub+7pEa51Ld22C8H/Cgr1c9M=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: VjD1WJDBEJ6jM21ka0Mb4aXd4QHD9XIuUxbxMPiUcFY=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: 3xw0HLqYnhw8nlGCY46G2OOB3Vvab+9E1+ZtO3U7q7s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:da:6f:1b:03:b7:0c:4f:85:8f:80:6c:d2:8e:b0:a5:e4:a1:a0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Oct 20 18:07:24 2025 GMT
            Not After : Oct 24 18:07:24 2025 GMT
        Subject: serialNumber=4a2f16cf6d3ca421c3c78de352637094e220583e0856c945f43ef05cc1360a1a, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:ab:62:c1:29:e4:d8:ca:2e:a3:e6:40:32:
                    d4:7a:da:08:68:46:5b:ef:3f:e1:95:93:7c:c4:8d:
                    ce:47:a6:8e:ab:49:4f:d1:b8:ed:2a:1c:32:94:2d:
                    bd:c8:97:fb:02:0f:9f:13:da:66:e4:a8:3e:9a:80:
                    70:00:89:e2:fa:4a:28:25:cf:53:92:80:cf:31:46:
                    41:85:e0:67:96:ec:8d:9e:1c:b3:77:1e:6b:3b:22:
                    36:4f:99:68:03:ca:98:fe:9d:08:46:8b:3e:da:d3:
                    fe:5d:e7:df:96:be:95:05:ee:90:37:17:ed:79:1f:
                    66:4f:6e:8a:39:eb:a2:63:3b:de:e9:84:d3:ea:13:
                    31:39:ff:1a:41:ed:9a:e3:63:11:28:37:25:b7:1f:
                    ae:10:00:19:9f:3a:76:0e:6e:ad:c8:ac:e4:af:34:
                    f3:eb:b8:d0:09:34:4f:e4:60:3d:2b:3d:23:a2:08:
                    13:10:95:29:f0:a6:4a:46:d0:52:f8:6b:13:34:39:
                    01:b5:10:0a:ea:43:3b:2c:cf:ec:11:61:d6:f8:8e:
                    fd:e5:af:f3:71:17:04:4d:8a:63:24:55:70:1f:b2:
                    1d:5d:85:0a:7c:37:e4:39:28:6d:5c:b5:6c:d0:81:
                    a3:9b:3e:ba:2c:2d:f3:a7:9c:aa:cc:f3:d5:35:18:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:63:30:B0:5A:C0:76:43:F3:B6:75:AC:EE:DB:AF:F6:85:6F:91:B0
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:85:45:73:d4:92:34:90:4b:2a:b9:0f:a8:29:f3:d0:14:d7:
         19:2e:79:1f:2f:dc:14:41:e9:b3:47:eb:da:6a:67:a5:92:c1:
         bd:43:c5:82:fb:ff:14:24:96:8b:fe:bd:97:50:16:25:85:6c:
         97:ab:a0:9f:42:23:89:4e:40:44:e1:a4:88:8a:74:44:e8:90:
         4e:7c:0d:38:41:1b:1b:21:55:83:9b:48:f1:87:18:e1:d2:18:
         58:6d:b7:d8:b4:fe:7c:d2:fd:94:af:d9:43:c1:8c:59:b9:16:
         e1:a7:2b:1e:59:7f:74:c9:55:b5:7f:7e:23:bc:cb:9e:4f:50:
         1e:d6:3c:23:cf:c7:66:e4:05:e6:56:25:9d:75:a3:0a:c4:30:
         3f:b8:a9:66:8b:e0:4e:b3:dc:81:c8:da:a4:b0:c4:e2:a9:41:
         01:a6:9b:d6:aa:97:c2:44:51:90:1c:14:23:a2:fd:9b:c3:88:
         ef:40:ac:18:95:fe:44:df:ca:5e:2b:db:82:8b:8e:d1:e5:83:
         b0:31:46:a6:7a:1e:51:f6:e7:f4:d2:61:8d:dc:3f:4a:9b:c0:
         5b:b9:d2:02:4d:43:05:a2:c2:b8:e3:cf:8e:b8:4d:6c:0b:b9:
         b0:b4:40:5a:f8:e8:19:58:4b:ba:20:d6:49:ab:29:c9:74:1d:
         aa:b3:41:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:30:33 2025 by rpki-client